CVE-2019-1717

A vulnerability in the web-based management interface of Cisco Video Surveillance Manager could allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to improper validation of parameters handled by the web-based management interface. An attacker could...

CVE-2019-1717: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based management interface of Cisco Video Surveillance Manager could allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to improper validation of parameters handled by the web-based management interface. An attacker could...

PT-2019-2197

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance Manager affected versions not specified Description The issue is related to improper validation of parameters handled by the web-based management interface, allowing an unauthenticated, remote attacker to access...

PT-2018-2016

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance Manager VSM Software affected versions not specified Description A vulnerability in the software could allow an unauthenticated, remote attacker to log in to an affected system by using the root account, which has...

CVE-2018-15427: Use of Hard-coded Credentials

A vulnerability in Cisco Video Surveillance Manager VSM Software running on certain Cisco Connected Safety and Security Unified Computing System UCS platforms could allow an unauthenticated, remote attacker to log in to an affected system by using the root account, which has default, static user...

Cisco Video Surveillance Manager Multiple Vulnerabilities (cisco-sa-20130724-vsm)

According to its self-reported version, the version of Cisco Video Surveillance Manager installed on the remote host is affected by multiple vulnerabilities : - The application is affected by a directory traversal vulnerability because Cisco VSM does not properly validate user-supplied input to t...

CVE-2013-3429

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager VSM before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the CiscoVSBWT aka Broadware sample code package, aka Bug ID CSCsv37163...

Directory traversal

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager VSM before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the CiscoVSBWT aka Broadware sample code package, aka Bug ID CSCsv37163...

CVE-2013-3430

Cisco Video Surveillance Manager VSM before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the CiscoVSBWT aka Broadware sample code package, aka Bug ID CSCsv37288...

PT-2013-4385

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance Manager VSM versions prior to 7.0.0 Description The issue allows remote attackers to read system files via a crafted URL, related to the Cisco VSBWT package. Recommendations For versions prior to 7.0.0, update to versi...

PT-2013-4386

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance Manager VSM versions prior to 7.0.0 Description The issue allows remote attackers to obtain sensitive configuration, archive, and log information. This is related to the Cisco VSBWT package. Recommendations For version...

CVE-2013-3429: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager VSM before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the CiscoVSBWT aka Broadware sample code package, aka Bug ID CSCsv37163...

CVE-2013-3430: Improper Authentication

Cisco Video Surveillance Manager VSM before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the CiscoVSBWT aka Broadware sample code package, aka Bug ID CSCsv37288...

CVE-2013-3431: Improper Authentication

Cisco Video Surveillance Manager VSM before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the CiscoVSBWT aka Broadware sample code package...

PT-2013-4387

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance Manager VSM versions prior to 7.0.0 Description The issue allows remote attackers to obtain sensitive configuration, archive, and log information without requiring authentication for access to VSMC monitoring pages. Th...